Esempio n. 1
0
    def test_check_banner(self):
        res = apache_httpd.check_banner(
            "Apache", "<raw-request-data>", "http://adamcaudill.com"
        )

        self.assertEqual(1, len(res))
        self.assertEqual("Generic Apache Server Banner Found", res[0].message)
Esempio n. 2
0
    def test_check_banner_future(self):
        res = apache_httpd.check_banner("Apache/99.9.9", "<raw-request-data>",
                                        "http://adamcaudill.com")

        self.assertEqual(1, len(res))
        self.assertEqual("Apache Server Version Exposed: Apache/99.9.9",
                         res[0].message)
Esempio n. 3
0
    def test_check_banner_old_invalid(self):
        res = apache_httpd.check_banner("Apache/1.1.7", "<raw-request-data>",
                                        "http://adamcaudill.com")

        self.assertEqual(2, len(res))
        self.assertEqual("Apache Server Version Exposed: Apache/1.1.7",
                         res[0].message)
        self.assertIn("Apache Server Outdated:", res[1].message)
Esempio n. 4
0
def get_server_banner_issues(server: str, raw: str, url: str,
                             headers: Dict) -> List[Result]:
    results: List[Result] = []

    results += apache_httpd.check_banner(server, raw, url)
    results += nginx.check_banner(server, raw, url)
    results += iis.check_version(server, raw, url, headers)
    results += python.check_banner(server, raw, url)

    return results
Esempio n. 5
0
    def test_check_banner_old_php(self):
        res = apache_httpd.check_banner(
            "Apache/2.4.6 (FreeBSD) PHP/5.4.23",
            "<raw-request-data>",
            "http://adamcaudill.com",
        )

        self.assertEqual(4, len(res))
        self.assertEqual("Apache Server Version Exposed: Apache/2.4.6", res[0].message)
        self.assertIn("Apache Server Outdated:", res[1].message)
        self.assertEqual("PHP Version Exposed: PHP/5.4.23", res[2].message)
        self.assertIn("PHP Outdated:", res[3].message)